2017-05-24 16:59:26 -04:00
|
|
|
# coding: utf-8
|
|
|
|
require 'spec_helper'
|
|
|
|
|
|
|
|
describe Gitlab::PathRegex, lib: true do
|
|
|
|
# Pass in a full path to remove the format segment:
|
|
|
|
# `/ci/lint(.:format)` -> `/ci/lint`
|
|
|
|
def without_format(path)
|
|
|
|
path.split('(', 2)[0]
|
|
|
|
end
|
|
|
|
|
|
|
|
# Pass in a full path and get the last segment before a wildcard
|
|
|
|
# That's not a parameter
|
|
|
|
# `/*namespace_id/:project_id/builds/artifacts/*ref_name_and_path`
|
|
|
|
# -> 'builds/artifacts'
|
|
|
|
def path_before_wildcard(path)
|
|
|
|
path = path.gsub(STARTING_WITH_NAMESPACE, "")
|
|
|
|
path_segments = path.split('/').reject(&:empty?)
|
|
|
|
wildcard_index = path_segments.index { |segment| parameter?(segment) }
|
|
|
|
|
|
|
|
segments_before_wildcard = path_segments[0..wildcard_index - 1]
|
|
|
|
|
|
|
|
segments_before_wildcard.join('/')
|
|
|
|
end
|
|
|
|
|
|
|
|
def parameter?(segment)
|
|
|
|
segment =~ /[*:]/
|
|
|
|
end
|
|
|
|
|
|
|
|
# If the path is reserved. Then no conflicting paths can# be created for any
|
|
|
|
# route using this reserved word.
|
|
|
|
#
|
|
|
|
# Both `builds/artifacts` & `build` are covered by reserving the word
|
|
|
|
# `build`
|
|
|
|
def wildcards_include?(path)
|
|
|
|
described_class::PROJECT_WILDCARD_ROUTES.include?(path) ||
|
|
|
|
described_class::PROJECT_WILDCARD_ROUTES.include?(path.split('/').first)
|
|
|
|
end
|
|
|
|
|
2017-07-18 09:28:20 -04:00
|
|
|
def failure_message(constant_name, migration_helper, missing_words: [], additional_words: [])
|
2017-05-24 16:59:26 -04:00
|
|
|
missing_words = Array(missing_words)
|
2017-07-18 03:21:09 -04:00
|
|
|
additional_words = Array(additional_words)
|
2017-07-18 09:28:20 -04:00
|
|
|
message = ""
|
|
|
|
if missing_words.any?
|
|
|
|
message += <<-MISSING
|
2017-05-24 16:59:26 -04:00
|
|
|
Found new routes that could cause conflicts with existing namespaced routes
|
|
|
|
for groups or projects.
|
|
|
|
|
|
|
|
Add <#{missing_words.join(', ')}> to `Gitlab::PathRegex::#{constant_name}
|
|
|
|
to make sure no projects or namespaces can be created with those paths.
|
|
|
|
|
|
|
|
To rename any existing records with those paths you can use the
|
|
|
|
`Gitlab::Database::RenameReservedpathsMigration::<VERSION>.#{migration_helper}`
|
|
|
|
migration helper.
|
|
|
|
|
|
|
|
Make sure to make a note of the renamed records in the release blog post.
|
|
|
|
|
2017-07-18 09:28:20 -04:00
|
|
|
MISSING
|
|
|
|
end
|
2017-07-18 03:21:09 -04:00
|
|
|
|
|
|
|
if additional_words.any?
|
2017-07-18 09:28:20 -04:00
|
|
|
message += <<-ADDITIONAL
|
2017-07-18 03:21:09 -04:00
|
|
|
Why are <#{additional_words.join(', ')}> in `#{constant_name}`?
|
|
|
|
If they are really required, update these specs to reflect that.
|
|
|
|
|
|
|
|
ADDITIONAL
|
|
|
|
end
|
|
|
|
|
|
|
|
message
|
2017-05-24 16:59:26 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
let(:all_routes) do
|
|
|
|
route_set = Rails.application.routes
|
|
|
|
routes_collection = route_set.routes
|
|
|
|
routes_array = routes_collection.routes
|
|
|
|
routes_array.map { |route| route.path.spec.to_s }
|
|
|
|
end
|
|
|
|
|
|
|
|
let(:routes_without_format) { all_routes.map { |path| without_format(path) } }
|
|
|
|
|
|
|
|
# Routes not starting with `/:` or `/*`
|
|
|
|
# all routes not starting with a param
|
|
|
|
let(:routes_not_starting_in_wildcard) { routes_without_format.select { |p| p !~ %r{^/[:*]} } }
|
|
|
|
|
|
|
|
let(:top_level_words) do
|
2017-07-18 03:21:09 -04:00
|
|
|
words = routes_not_starting_in_wildcard.map do |route|
|
2017-05-24 16:59:26 -04:00
|
|
|
route.split('/')[1]
|
|
|
|
end.compact.uniq
|
2017-07-18 03:21:09 -04:00
|
|
|
|
2017-07-25 07:48:30 -04:00
|
|
|
words + ee_top_level_words + files_in_public + Array(API::API.prefix.to_s)
|
2017-07-18 03:21:09 -04:00
|
|
|
end
|
|
|
|
|
2017-07-18 09:28:20 -04:00
|
|
|
let(:ee_top_level_words) do
|
|
|
|
['unsubscribes']
|
2017-07-18 03:21:09 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
let(:files_in_public) do
|
|
|
|
git = Gitlab.config.git.bin_path
|
|
|
|
`cd #{Rails.root} && #{git} ls-files public`
|
|
|
|
.split("\n")
|
|
|
|
.map { |entry| entry.gsub('public/', '') }
|
|
|
|
.uniq
|
2017-05-24 16:59:26 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
# All routes that start with a namespaced path, that have 1 or more
|
|
|
|
# path-segments before having another wildcard parameter.
|
|
|
|
# - Starting with paths:
|
|
|
|
# - `/*namespace_id/:project_id/`
|
|
|
|
# - `/*namespace_id/:id/`
|
|
|
|
# - Followed by one or more path-parts not starting with `:` or `*`
|
|
|
|
# - Followed by a path-part that includes a wildcard parameter `*`
|
|
|
|
# At the time of writing these routes match: http://rubular.com/r/Rv2pDE5Dvw
|
|
|
|
STARTING_WITH_NAMESPACE = %r{^/\*namespace_id/:(project_)?id}
|
|
|
|
NON_PARAM_PARTS = %r{[^:*][a-z\-_/]*}
|
|
|
|
ANY_OTHER_PATH_PART = %r{[a-z\-_/:]*}
|
|
|
|
WILDCARD_SEGMENT = %r{\*}
|
|
|
|
let(:namespaced_wildcard_routes) do
|
|
|
|
routes_without_format.select do |p|
|
|
|
|
p =~ %r{#{STARTING_WITH_NAMESPACE}/#{NON_PARAM_PARTS}/#{ANY_OTHER_PATH_PART}#{WILDCARD_SEGMENT}}
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
# This will return all paths that are used in a namespaced route
|
|
|
|
# before another wildcard path:
|
|
|
|
#
|
|
|
|
# /*namespace_id/:project_id/builds/artifacts/*ref_name_and_path
|
|
|
|
# /*namespace_id/:project_id/info/lfs/objects/*oid
|
|
|
|
# /*namespace_id/:project_id/commits/*id
|
|
|
|
# /*namespace_id/:project_id/builds/:build_id/artifacts/file/*path
|
|
|
|
# -> ['builds/artifacts', 'info/lfs/objects', 'commits', 'artifacts/file']
|
|
|
|
let(:all_wildcard_paths) do
|
|
|
|
namespaced_wildcard_routes.map do |route|
|
|
|
|
path_before_wildcard(route)
|
|
|
|
end.uniq
|
|
|
|
end
|
|
|
|
|
|
|
|
STARTING_WITH_GROUP = %r{^/groups/\*(group_)?id/}
|
|
|
|
let(:group_routes) do
|
|
|
|
routes_without_format.select do |path|
|
|
|
|
path =~ STARTING_WITH_GROUP
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
let(:paths_after_group_id) do
|
|
|
|
group_routes.map do |route|
|
|
|
|
route.gsub(STARTING_WITH_GROUP, '').split('/').first
|
2017-07-18 09:28:20 -04:00
|
|
|
end.uniq + ee_paths_after_group_id
|
|
|
|
end
|
|
|
|
|
|
|
|
let(:ee_paths_after_group_id) do
|
|
|
|
%w(analytics
|
|
|
|
ldap
|
|
|
|
ldap_group_links
|
|
|
|
notification_setting
|
|
|
|
audit_events
|
|
|
|
pipeline_quota hooks)
|
2017-05-24 16:59:26 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
describe 'TOP_LEVEL_ROUTES' do
|
|
|
|
it 'includes all the top level namespaces' do
|
|
|
|
failure_block = lambda do
|
|
|
|
missing_words = top_level_words - described_class::TOP_LEVEL_ROUTES
|
2017-07-18 03:21:09 -04:00
|
|
|
additional_words = described_class::TOP_LEVEL_ROUTES - top_level_words
|
|
|
|
failure_message('TOP_LEVEL_ROUTES', 'rename_root_paths',
|
|
|
|
missing_words: missing_words, additional_words: additional_words)
|
2017-05-24 16:59:26 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
expect(described_class::TOP_LEVEL_ROUTES)
|
2017-07-18 03:21:09 -04:00
|
|
|
.to contain_exactly(*top_level_words), failure_block
|
2017-05-24 16:59:26 -04:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe 'GROUP_ROUTES' do
|
|
|
|
it "don't contain a second wildcard" do
|
|
|
|
failure_block = lambda do
|
|
|
|
missing_words = paths_after_group_id - described_class::GROUP_ROUTES
|
2017-07-18 09:28:20 -04:00
|
|
|
additional_words = described_class::GROUP_ROUTES - paths_after_group_id
|
|
|
|
failure_message('GROUP_ROUTES', 'rename_child_paths',
|
|
|
|
missing_words: missing_words, additional_words: additional_words)
|
2017-05-24 16:59:26 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
expect(described_class::GROUP_ROUTES)
|
2017-07-18 09:28:20 -04:00
|
|
|
.to contain_exactly(*paths_after_group_id), failure_block
|
2017-05-24 16:59:26 -04:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe 'PROJECT_WILDCARD_ROUTES' do
|
|
|
|
it 'includes all paths that can be used after a namespace/project path' do
|
|
|
|
aggregate_failures do
|
|
|
|
all_wildcard_paths.each do |path|
|
|
|
|
expect(wildcards_include?(path))
|
2017-07-18 03:21:09 -04:00
|
|
|
.to be(true), failure_message('PROJECT_WILDCARD_ROUTES', 'rename_wildcard_paths', missing_words: path)
|
2017-05-24 16:59:26 -04:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe '.root_namespace_path_regex' do
|
|
|
|
subject { described_class.root_namespace_path_regex }
|
|
|
|
|
|
|
|
it 'rejects top level routes' do
|
|
|
|
expect(subject).not_to match('admin/')
|
|
|
|
expect(subject).not_to match('api/')
|
|
|
|
expect(subject).not_to match('.well-known/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'accepts project wildcard routes' do
|
|
|
|
expect(subject).to match('blob/')
|
|
|
|
expect(subject).to match('edit/')
|
|
|
|
expect(subject).to match('wikis/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'accepts group routes' do
|
|
|
|
expect(subject).to match('activity/')
|
|
|
|
expect(subject).to match('group_members/')
|
|
|
|
expect(subject).to match('subgroups/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'is not case sensitive' do
|
|
|
|
expect(subject).not_to match('Users/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'does not allow extra slashes' do
|
|
|
|
expect(subject).not_to match('/blob/')
|
|
|
|
expect(subject).not_to match('blob//')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe '.full_namespace_path_regex' do
|
|
|
|
subject { described_class.full_namespace_path_regex }
|
|
|
|
|
|
|
|
context 'at the top level' do
|
|
|
|
context 'when the final level' do
|
|
|
|
it 'rejects top level routes' do
|
|
|
|
expect(subject).not_to match('admin/')
|
|
|
|
expect(subject).not_to match('api/')
|
|
|
|
expect(subject).not_to match('.well-known/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'accepts project wildcard routes' do
|
|
|
|
expect(subject).to match('blob/')
|
|
|
|
expect(subject).to match('edit/')
|
|
|
|
expect(subject).to match('wikis/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'accepts group routes' do
|
|
|
|
expect(subject).to match('activity/')
|
|
|
|
expect(subject).to match('group_members/')
|
|
|
|
expect(subject).to match('subgroups/')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'when more levels follow' do
|
|
|
|
it 'rejects top level routes' do
|
|
|
|
expect(subject).not_to match('admin/more/')
|
|
|
|
expect(subject).not_to match('api/more/')
|
|
|
|
expect(subject).not_to match('.well-known/more/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'accepts project wildcard routes' do
|
|
|
|
expect(subject).to match('blob/more/')
|
|
|
|
expect(subject).to match('edit/more/')
|
|
|
|
expect(subject).to match('wikis/more/')
|
|
|
|
expect(subject).to match('environments/folders/')
|
|
|
|
expect(subject).to match('info/lfs/objects/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'accepts group routes' do
|
|
|
|
expect(subject).to match('activity/more/')
|
|
|
|
expect(subject).to match('group_members/more/')
|
|
|
|
expect(subject).to match('subgroups/more/')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'at the second level' do
|
|
|
|
context 'when the final level' do
|
|
|
|
it 'accepts top level routes' do
|
|
|
|
expect(subject).to match('root/admin/')
|
|
|
|
expect(subject).to match('root/api/')
|
|
|
|
expect(subject).to match('root/.well-known/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'rejects project wildcard routes' do
|
|
|
|
expect(subject).not_to match('root/blob/')
|
|
|
|
expect(subject).not_to match('root/edit/')
|
|
|
|
expect(subject).not_to match('root/wikis/')
|
|
|
|
expect(subject).not_to match('root/environments/folders/')
|
|
|
|
expect(subject).not_to match('root/info/lfs/objects/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'rejects group routes' do
|
|
|
|
expect(subject).not_to match('root/activity/')
|
|
|
|
expect(subject).not_to match('root/group_members/')
|
|
|
|
expect(subject).not_to match('root/subgroups/')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'when more levels follow' do
|
|
|
|
it 'accepts top level routes' do
|
|
|
|
expect(subject).to match('root/admin/more/')
|
|
|
|
expect(subject).to match('root/api/more/')
|
|
|
|
expect(subject).to match('root/.well-known/more/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'rejects project wildcard routes' do
|
|
|
|
expect(subject).not_to match('root/blob/more/')
|
|
|
|
expect(subject).not_to match('root/edit/more/')
|
|
|
|
expect(subject).not_to match('root/wikis/more/')
|
|
|
|
expect(subject).not_to match('root/environments/folders/more/')
|
|
|
|
expect(subject).not_to match('root/info/lfs/objects/more/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'rejects group routes' do
|
|
|
|
expect(subject).not_to match('root/activity/more/')
|
|
|
|
expect(subject).not_to match('root/group_members/more/')
|
|
|
|
expect(subject).not_to match('root/subgroups/more/')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'is not case sensitive' do
|
|
|
|
expect(subject).not_to match('root/Blob/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'does not allow extra slashes' do
|
|
|
|
expect(subject).not_to match('/root/admin/')
|
|
|
|
expect(subject).not_to match('root/admin//')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe '.project_path_regex' do
|
|
|
|
subject { described_class.project_path_regex }
|
|
|
|
|
|
|
|
it 'accepts top level routes' do
|
|
|
|
expect(subject).to match('admin/')
|
|
|
|
expect(subject).to match('api/')
|
|
|
|
expect(subject).to match('.well-known/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'rejects project wildcard routes' do
|
|
|
|
expect(subject).not_to match('blob/')
|
|
|
|
expect(subject).not_to match('edit/')
|
|
|
|
expect(subject).not_to match('wikis/')
|
|
|
|
expect(subject).not_to match('environments/folders/')
|
|
|
|
expect(subject).not_to match('info/lfs/objects/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'accepts group routes' do
|
|
|
|
expect(subject).to match('activity/')
|
|
|
|
expect(subject).to match('group_members/')
|
|
|
|
expect(subject).to match('subgroups/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'is not case sensitive' do
|
|
|
|
expect(subject).not_to match('Blob/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'does not allow extra slashes' do
|
|
|
|
expect(subject).not_to match('/admin/')
|
|
|
|
expect(subject).not_to match('admin//')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe '.full_project_path_regex' do
|
|
|
|
subject { described_class.full_project_path_regex }
|
|
|
|
|
|
|
|
it 'accepts top level routes' do
|
|
|
|
expect(subject).to match('root/admin/')
|
|
|
|
expect(subject).to match('root/api/')
|
|
|
|
expect(subject).to match('root/.well-known/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'rejects project wildcard routes' do
|
|
|
|
expect(subject).not_to match('root/blob/')
|
|
|
|
expect(subject).not_to match('root/edit/')
|
|
|
|
expect(subject).not_to match('root/wikis/')
|
|
|
|
expect(subject).not_to match('root/environments/folders/')
|
|
|
|
expect(subject).not_to match('root/info/lfs/objects/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'accepts group routes' do
|
|
|
|
expect(subject).to match('root/activity/')
|
|
|
|
expect(subject).to match('root/group_members/')
|
|
|
|
expect(subject).to match('root/subgroups/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'is not case sensitive' do
|
|
|
|
expect(subject).not_to match('root/Blob/')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'does not allow extra slashes' do
|
|
|
|
expect(subject).not_to match('/root/admin/')
|
|
|
|
expect(subject).not_to match('root/admin//')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe '.namespace_format_regex' do
|
|
|
|
subject { described_class.namespace_format_regex }
|
|
|
|
|
|
|
|
it { is_expected.to match('gitlab-ce') }
|
|
|
|
it { is_expected.to match('gitlab_git') }
|
|
|
|
it { is_expected.to match('_underscore.js') }
|
|
|
|
it { is_expected.to match('100px.com') }
|
|
|
|
it { is_expected.to match('gitlab.org') }
|
|
|
|
it { is_expected.not_to match('?gitlab') }
|
|
|
|
it { is_expected.not_to match('git lab') }
|
|
|
|
it { is_expected.not_to match('gitlab.git') }
|
|
|
|
it { is_expected.not_to match('gitlab.org.') }
|
|
|
|
it { is_expected.not_to match('gitlab.org/') }
|
|
|
|
it { is_expected.not_to match('/gitlab.org') }
|
|
|
|
it { is_expected.not_to match('gitlab git') }
|
|
|
|
end
|
|
|
|
|
|
|
|
describe '.project_path_format_regex' do
|
|
|
|
subject { described_class.project_path_format_regex }
|
|
|
|
|
|
|
|
it { is_expected.to match('gitlab-ce') }
|
|
|
|
it { is_expected.to match('gitlab_git') }
|
|
|
|
it { is_expected.to match('_underscore.js') }
|
|
|
|
it { is_expected.to match('100px.com') }
|
|
|
|
it { is_expected.not_to match('?gitlab') }
|
|
|
|
it { is_expected.not_to match('git lab') }
|
|
|
|
it { is_expected.not_to match('gitlab.git') }
|
|
|
|
end
|
|
|
|
end
|